Investigate System Interactions

Discover the Tools

ProcDOT

Visualize and examine the output of Process Monitor.

Website: https://www.procdot.com Author: Christian Wojner: https://twitter.com/Didelphodon License: Free, custom license: https://cert.at/media/files/downloads/software/procdot/files/license.txt Notes: procdot State File: remnux.packages.procdot

sandfly-processdecloak

Find hidden processes on the local Linux system.

Website: https://github.com/sandflysecurity/sandfly-processdecloak Author: Sandfly Security: https://twitter.com/SandflySecurity License: MIT License: https://github.com/sandflysecurity/sandfly-processdecloak/blob/master/LICENSE State File: remnux.packages.sandfly-processdecloak

Unhide

Find hidden processes or connections on the local Linux system.

Website: http://www.unhide-forensics.info Author: Yago Jesus: https://twitter.com/YJesus License: GNU General Public License (GPL) v3: https://www.gnu.org/licenses/gpl-3.0.html State File: remnux.packages.unhide